cm: policy for ipv6 tethering
* Enable use of radish via netd for ipv6 tethering
Change-Id: Ifa0e85686fc70f59c089ca40a78cea9935820185
diff --git a/sepolicy/file_contexts b/sepolicy/file_contexts
index 78b3ee1..e23df31 100644
--- a/sepolicy/file_contexts
+++ b/sepolicy/file_contexts
@@ -6,3 +6,5 @@
/sys/devices/system/cpu.*/cpufreq(/.*)? -- u:object_r:sysfs_devices_system_cpu:s0
/sys/block/mmcblk0/queue/scheduler -- u:object_r:sysfs_writable:s0
+/data/hostapd(/.*)? u:object_r:wifi_data_file:s0
+/data/misc/radio(/.*)? u:object_r:radio_data_file:s0
diff --git a/sepolicy/netd.te b/sepolicy/netd.te
new file mode 100644
index 0000000..4ad0b3e
--- /dev/null
+++ b/sepolicy/netd.te
@@ -0,0 +1,4 @@
+allow netd self:capability { setuid sys_module setgid };
+allow netd self:packet_socket create_socket_perms;
+allow netd radio_data_file:dir rw_dir_perms;
+allow netd radio_data_file:file create_file_perms;
diff --git a/sepolicy/sepolicy.mk b/sepolicy/sepolicy.mk
index 0508bf6..b50ec1d 100644
--- a/sepolicy/sepolicy.mk
+++ b/sepolicy/sepolicy.mk
@@ -13,6 +13,7 @@
genfs_contexts \
seapp_contexts \
installd.te \
+ netd.te \
ueventd.te \
vold.te \
mac_permissions.xml